Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a383030303a3a2f33342d3334203d3e20323638353132.roa
File:                     323830343a363863303a383030303a3a2f33342d3334203d3e20323638353132.roa (raw, json)
Hash identifier:          PpiMKPR04u690EA3pAYvO9jONmA6zfQJLplZF2ABVpQ=
Subject key identifier:   D6:0B:75:50:98:C8:9F:26:69:FF:8A:53:F5:CC:56:C7:B3:4B:A9:A9
Certificate issuer:       /CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
Certificate serial:       264040AD889B5C20426F98906857ECA5B69A2D89
Authority key identifier: 6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a383030303a3a2f33342d3334203d3e20323638353132.roa
Signing time:             Wed 08 Nov 2023 18:46:18 +0000
ROA not before:           Wed 08 Nov 2023 18:41:18 +0000
ROA not after:            Wed 06 Nov 2024 18:46:18 +0000
asID:                     268512
IP address blocks:        2804:68c0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:40:ad:88:9b:5c:20:42:6f:98:90:68:57:ec:a5:b6:9a:2d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
        Validity
            Not Before: Nov  8 18:41:18 2023 GMT
            Not After : Nov  6 18:46:18 2024 GMT
        Subject: CN=D60B755098C89F2669FF8A53F5CC56C7B34BA9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:21:d6:b6:a8:c6:60:1d:0c:cd:a4:2a:14:
                    91:6f:24:b5:71:d3:ee:70:02:43:c0:32:17:b0:b6:
                    1c:00:b9:dc:c7:fc:15:ba:52:27:e2:f7:75:fa:67:
                    18:e6:3e:4d:29:ad:c0:0b:9b:32:ba:1e:38:e1:8a:
                    5a:37:50:e0:b2:d2:e2:02:f6:0b:43:df:78:3a:41:
                    95:d4:63:38:84:5e:29:3c:d6:78:c8:83:42:f2:7d:
                    4f:be:e0:73:7f:ea:50:88:07:2e:8b:fc:60:8f:79:
                    89:8f:4a:46:6b:2f:ea:11:93:61:1a:ac:22:06:20:
                    9d:cb:34:ae:93:03:03:ee:a7:c5:a6:7c:89:08:09:
                    fa:3f:3d:bd:8c:da:2b:9b:06:fb:c4:66:5e:23:13:
                    8c:50:49:36:4e:8f:6d:bd:7d:84:3b:ea:26:79:4d:
                    e8:0e:e9:1d:31:64:8f:1a:2c:96:b8:2a:cb:dc:7b:
                    3d:38:8c:52:77:72:92:2f:13:ce:4b:6d:c3:f6:79:
                    2b:86:93:38:c6:e7:1b:c2:a7:fb:35:8b:4d:dd:df:
                    0a:b8:db:33:37:92:d3:03:20:05:49:ae:f2:7b:ba:
                    8b:0e:ea:1d:06:c9:09:46:54:ee:79:85:11:a0:a7:
                    9c:b4:3c:19:bc:ce:30:86:a9:41:41:57:6b:e9:b5:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:75:50:98:C8:9F:26:69:FF:8A:53:F5:CC:56:C7:B3:4B:A9:A9
            X509v3 Authority Key Identifier:
                keyid:6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a383030303a3a2f33342d3334203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:4b:d0:d1:4b:1d:e0:93:2f:fc:c8:7b:53:d0:e5:4b:12:
         6e:6a:52:6b:f6:e3:11:a9:ee:9d:1c:30:d0:5e:64:db:8f:9d:
         55:7b:24:8c:9b:af:69:e6:5f:09:4f:fc:9f:04:b0:44:3d:15:
         dd:f8:d9:63:a7:07:fb:67:d0:ec:b6:c8:d8:e9:5f:1d:fd:d5:
         f9:eb:85:32:a0:5d:df:be:1c:4a:3b:be:f7:c9:e8:19:d8:f0:
         61:bc:3c:d4:1d:15:a5:b3:f4:55:e5:e1:a4:82:60:b7:66:63:
         0e:63:a9:a0:f8:fd:54:51:0f:0b:e2:c2:a2:d4:47:db:da:ed:
         31:8f:e1:3a:3e:7c:f6:97:a7:b8:60:1f:8b:9b:51:ff:9a:cb:
         b7:66:43:76:d5:4d:16:56:57:64:92:eb:a1:02:13:5d:3e:de:
         23:06:5b:13:21:46:31:65:e2:cf:27:b3:3c:f0:d8:fa:bd:bf:
         4c:b5:a8:cc:39:a7:a8:15:fe:58:3e:84:92:a0:18:00:b4:a2:
         fc:c0:cb:52:a6:86:1c:10:7d:45:11:12:e4:4c:ef:80:e6:a1:
         26:60:37:a5:6b:de:43:fd:de:6b:0d:7d:ff:29:d4:ba:5c:2f:
         27:fb:ab:e5:f4:3a:51:a5:7b:b9:a4:fb:8d:70:d2:c5:9a:e5:
         1e:b2:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:13:30 2025 by rpki-client